886A9594355A0FCE24F001F602BC6CAE7BF2DF2DEEEF18698CFE773E3C926F61[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
886A9594355A0FCE24F001F602BC6CAE7BF2DF2DEEEF18698CFE773E3C926F61.exe
Size 823KB
Sample240724-w4xtbstdph
SHA256 e5d9f02670d27c81762ca962c07dc4b8f3daf4085bfbe77a60d450f3f61684b0
MD5 f2dde5c7239c43be76962ab8ea6b0e31
SHA1 99c32459e78fc576d49ee50efd3a7291a306a73d
SHA512 79227110acea18a6beaf6f2f489321a10760c05e88f76b4abd997350e954bb1662be674046c5b075be5ea2ebcf2cb91bbd62316dd31d9388298c204ace74ab06
SSDEEP 12288:7oCtuFrPeANDIIDZK+uLwbHK07uVJHZaUgB16dGIsHUwfxqk2FkWwF9bUm:34P5B3Zjvbov68sH/SFkD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886A9594355A0FCE24F001F602BC6CAE7BF2DF2DEEEF18698CFE773E3C926F61.exe

File Explorer

886A9594355A0FCE24F001F602BC6CAE7BF2DF2DEEEF18698CFE773E3C926F61.exe

.exe 823KB

886A9594355A0FCE24F001F602BC6CAE7BF2DF2DEEEF18698CFE773E3C926F61.exe

IMPHASH 4988f2ae63018c28daaeda2dba44eec2
SHA256 e5d9f02670d27c81762ca962c07dc4b8f3daf4085bfbe77a60d450f3f61684b0
MD5 f2dde5c7239c43be76962ab8ea6b0e31
SHA1 99c32459e78fc576d49ee50efd3a7291a306a73d
SHA512 79227110acea18a6beaf6f2f489321a10760c05e88f76b4abd997350e954bb1662be674046c5b075be5ea2ebcf2cb91bbd62316dd31d9388298c204ace74ab06
SSDEEP 12288:7oCtuFrPeANDIIDZK+uLwbHK07uVJHZaUgB16dGIsHUwfxqk2FkWwF9bUm:34P5B3Zjvbov68sH/SFkD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1003520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jetefufah.pdb

kernel32

GetNamedPipeHandleStateW FileTimeToSystemTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterW GetTimeZoneInformation TerminateProcess SetLastError SetEvent FindNextFileA GetCompressedFileSizeW CopyFileExW BuildCommDCBAndTimeoutsA QueryDepthSList GetVersionExW VerifyVersionInfoW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructW FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointW GetWriteWatch WriteConsoleInputA SetComputerNameExW FindAtomA GlobalDeleteAtom SetThreadPriority CallNamedPipeW GetDriveTypeW VirtualProtect LoadLibraryW LocalAlloc InterlockedDecrement FindFirstChangeNotificationA VerifyVersionInfoA CopyFileA FormatMessageW SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID GlobalUnfix GetStartupInfoW GetSystemWow64DirectoryW CopyFileW GetLastError DebugBreak SetConsoleCursorInfo SetCalendarInfoA SetConsoleCursorPosition ContinueDebugEvent InterlockedExchangeAdd GetACP FindFirstVolumeW CreateActCtxA GetConsoleAliasA OutputDebugStringW EnumResourceTypesA lstrlenA WriteConsoleW GetPrivateProfileSectionNamesA GlobalWire FreeEnvironmentStringsW lstrcatA EnumCalendarInfoA SetThreadAffinityMask LockFile RaiseException VerSetConditionMask SetConsoleCP GetSystemWindowsDirectoryA GetProfileStringA GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameA SetComputerNameA GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW SetCommState MoveFileWithProgressA GetSystemTimeAdjustment _hread _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA ResetWriteWatch GetSystemWindowsDirectoryW EnumDateFormatsW GetModuleHandleA DeleteAtom GetComputerNameW GetConsoleAliasesLengthA FindFirstVolumeA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointA ReadConsoleW WriteConsoleOutputCharacterA GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA GetCurrentActCtx InitializeCriticalSection WriteProfileSectionA SetLocaleInfoA GetPrivateProfileStringA LoadLibraryA DeleteFileA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep InterlockedIncrement GetProcAddress ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidth32A

advapi32

ImpersonateSelf

winhttp

WinHttpWriteData

msimg32

AlphaBlend